Posted by Nightwatch Cybersecurity Research on Dec 05

[Also posted online:
https://wwws.nightwatchcybersecurity.com/2016/12/05/cve-2016-5341/]

Summary

Assisted GPS/GNSS data provided by Qualcomm for compatible receivers
is often being served over HTTP without SSL. Additionally many of
these files do not provide a digital signature to ensure that data was
not tampered in transit. This can allow a network-level attacker to
mount a MITM attack and modify the data while in transit. While HTTPS
and…

Posted by 31c0n on Dec 05

==CALL FOR PRESENTATIONS ARE NOW OPEN===

Be one of the very first presenters in the 31c0n series. The
inaugural event will be held from 23-24 Feb 2017 in Auckland, New Zealand.
If you think you have something to add to our speaker line up, let us know.
We’re all about giving attendees an experience like no other so will only
accept talks of the highest calibre – if you think you fit the bill, put
your best submission forward ASAP.

We accept…